Privacy Policy

1. Introduction

LexInnovate ("we", "us", "our") operates CaseMate, a legal form preparation platform. This Privacy Policy explains how we collect, use, disclose, and protect your personal information.

We are committed to protecting your privacy and complying with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

By using CaseMate, you consent to the collection and use of your information as described in this Privacy Policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address: For account creation, login, and communication
• Password: Stored securely using industry-standard encryption
• Account preferences: Settings and customisation options

2.2 Payment Information

When you subscribe to CaseMate:

• Payment details: Processed and stored securely by Stripe (our payment processor)
• Billing information: Name and billing address
• Transaction history: Records of your payments and subscriptions

Important: We do not store your credit card details on our servers. All payment information is handled by Stripe in compliance with PCI DSS standards.

2.3 Form Data (Stored Locally)

This includes:

• Personal details entered into family law forms
• Answers to wizard questions
• Draft applications and saved progress

What this means for you:

• Your sensitive legal information never leaves your device
• We cannot access your form data
• Your data is protected by your device security
• If you clear your browser data, your saved forms will be deleted

2.4 Usage Information

We automatically collect certain information about how you use CaseMate:

• Device information: Browser type, operating system, device type
• Usage data: Pages viewed, features used, time spent on pages
• Log data: IP address, access times, referring URLs

This information helps us improve CaseMate and ensure it works properly.

2.5 Communications

If you contact us for support:

• Email correspondence
• Support tickets and inquiries
• Feedback and survey responses

3. How We Use Your Information

3.1 Marketing Communications

We may send you:

• Service updates and announcements
• New feature notifications
• Tips for using CaseMate
• Promotional offers (with your consent)

You can unsubscribe from marketing emails at any time using the unsubscribe link in any email.

4. How We Protect Your Information

4.1 Security Measures

We implement industry-standard security measures to protect your information:

• SSL/TLS Encryption: All data transmission is encrypted
• Secure Servers: Hosted on secure, monitored infrastructure
• Password Protection: Passwords are encrypted using bcrypt hashing
• Access Controls: Limited access to personal information
• Regular Security Audits: Ongoing monitoring and updates

4.2 Local Storage

Your form data is stored locally in your browser using localStorage, which means:

• Data is encrypted by your browser
• Data is protected by your device security (password, biometric lock, etc.)
• We have no access to this locally-stored information

Your Responsibility: Keep your device secure with a strong password or biometric lock.

4.3 Third-Party Security

We use trusted third-party services that maintain their own security standards:

• Stripe: PCI DSS Level 1 compliant payment processing
• Cloudflare: Secure hosting and DDoS protection

5. Information Sharing and Disclosure

5.1 Service Providers

We share limited information with trusted service providers who help us operate CaseMate:

• Stripe: Payment processing (name, email, billing address, payment details)
• Cloudflare: Hosting and security (IP address, usage data)
• Email Service: Transactional and marketing emails (email address, name)

These service providers are bound by confidentiality agreements and only use your information to provide services to us.

5.2 Legal Requirements

We may disclose your information if required by law:

• In response to a subpoena, court order, or legal process
• To comply with government requests
• To protect our rights, property, or safety
• To prevent fraud or illegal activity

5.3 Business Transfers

If LexInnovate is acquired or merged with another company, your information may be transferred to the new owner, who will continue to be bound by this Privacy Policy.

6. Your Privacy Rights

Under Australian Privacy Principles, you have the following rights:

6.1 Access Your Information

You can request access to the personal information we hold about you by emailing [email protected].

6.2 Correct Your Information

If your information is inaccurate or outdated, you can:

• Update it directly in your account settings
• Email us at [email protected] to request corrections

6.3 Delete Your Information

You can request deletion of your personal information by emailing [email protected]. We will:

• Delete your account and associated data
• Retain certain information as required by law (e.g., transaction records for tax purposes)
• Process your request within 30 days

Note: Form data stored locally in your browser can be deleted by clearing your browser data.

6.4 Opt-Out of Marketing

You can unsubscribe from marketing emails by:

• Clicking the unsubscribe link in any marketing email
• Updating your preferences in your account settings
• Emailing [email protected]

You will continue to receive essential service-related emails (e.g., payment confirmations, password resets).

6.5 Complain About Privacy Practices

If you believe we have breached your privacy rights:

1. Contact us at [email protected] with details of your complaint
2. We will investigate and respond within 30 days
3. If you're not satisfied, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au

7. Cookies and Tracking Technologies

7.1 Cookies We Use

CaseMate uses cookies and similar technologies:

• Essential Cookies: Required for the Service to function (login, session management)
• Analytics Cookies: Help us understand how you use CaseMate (with your consent)
• Preference Cookies: Remember your settings and preferences

7.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may prevent you from using certain features of CaseMate.

8. Data Retention

We retain your information for as long as necessary to provide the Service and comply with legal obligations:

• Account Information: Until you delete your account, plus 90 days for recovery
• Payment Records: 7 years (required by Australian tax law)
• Support Communications: 3 years
• Usage Data: 2 years
• Form Data (Local): Until you clear your browser or delete it manually

9. Children's Privacy

CaseMate is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

If we become aware that we have collected information from a child under 18, we will delete it promptly. If you believe we have collected information from a child, please contact us at [email protected].

10. International Data Transfers

CaseMate is hosted in Australia. If you access the Service from outside Australia, please be aware that your information may be transferred to and processed in Australia.

By using CaseMate, you consent to the transfer of your information to Australia, where privacy laws may differ from those in your country.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

Material changes will be notified via:

• Email to your registered address
• Prominent notice on the CaseMate website
• Updated "Last Updated" date at the top of this page

Your continued use of CaseMate after changes are posted constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us:

For privacy complaints:

Office of the Australian Information Commissioner (OAIC)
Website: www.oaic.gov.au
Phone: 1300 363 992
Email: [email protected]